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DETAILED ACTION 

1 . The request filed on 05 February 2003 for a request for Continued Examination 
(RCE) under 35 CFR 132 based on Parent Application No. 09/328726 is acceptable and 
an RCE has been established. An Action on the RCE follows. 

2. Claims 14-16 have been cancelled without prejudice. 

3. Claims 17, 22, 27, 32, 37, 42, 47, 52, 57, and 62 have been amended. 

4. Claims 17-66 and 73-92 are pending. 

Docketing 

5. Please note that the application has been redocketed to a different examiner. 
Please refer all future communications regarding this application to the examiner of 
record, using the information supplied in the final section of the office action. 

Claim Rejections - 35 USC §112 

6. With the amendments and claim cancellation all 1 12 are withdrawn in the 
previous Action. 

Specification 

7. The title of the invention is not descriptive. A new title is required that is clearly 
indicative of the invention to which the claims are directed. Examier suggest " A 
Multiprime RSA Public Key Cryptosystem". 

Drawings 
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8. This application has been filed with informal drawings which are acceptable for 
examination purposes only. Formal drawings will be required when the application is 
allowed. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to 
a person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

9. Claim 17 is rejected under 35 U.S.C. 103(a) as being unpatentable over Lidl and 
Pilz (Applied Abstract Algebra, 1984), and further in view of Quisquater and Couvreur, 
Fast Decipherment Algorithm for RSA Public -Key Cryptosystem, 1982) and Rivest et. 
al. A Method for Obtaining Digital Signatures and Public-key Cryptosystem, 
Communications of the ACM, 21(2) February 1978, henceforth Rivest. 

10. As per claim 1, the limitation of a cryptographic system which breaks messages into 
blocks M of size 0 < M < n where n is a modulus of an RSA encryption algorithm 

C = M e mod n 
M = C d mod n 
ed = 1 mod A(n) 
the latter would imply 
d = e" 1 mod A(n) 

such that n eZ with prime factorization 
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n = pi e ' p 2 e2 P3 e3 ...Pk ek 

A(n) = Icm { A( Pi e, )M P2 e2 )A( p 3 e ') ... A( p k e ')} 

for which if ei > 2 

A( Pi e ' ) = cj)( Pi e ' ) 

is the Euler totient and if ej = 1 

<M Pi ) = Pi -1 

with e relatively primed to (pi-1) (P2-1) (P3-1) ... (p k — 1) which would imply 
d = e 1 mod {(p r 1 ) (p 2 -1 ) (p 3 -1 ) ... (p k 

Is disclosed in Lidl page 289, lines 3, 5-6, bottom page 290, page 291 lines 3-7, page 
293 problem 1 1 . Lidl does not disclose the use of the Chinese Remainder Theorem 
(CRT) with respect to the problem at hand; however, by way of example, Lidl does 
teach application of his teachings to the special case of where the prime factors are 
distinct pi = p and P2 = q, that is, ei = e 2 = 1 . 

Quisquater teaches reduction RSA (two prime factors p and q) calculation to a 
simultaneous system of modular congruences 
C1 = C mod pi C 2 = C mod p 2 

Mi = Ci dl mod Pt M 2 = C 2 d2 mod pi 

di = d mod fa -1 ) d 2 = d mod (p 2 -1 ) 

Solving for the results for Mi and M 2 and combining the sub-task to produce the receive 
message M. Reducing the calculations to simultaneous sub-task allows Quisquater to 
carry out the calculations much faster as pi and p 2 , di, d 2 , Mi M 2 and C1 C 2 are much 
smaller in terms of the number of bits (see page 906 lines 3-8, 31-39, 55-60). Further 
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such subtasks may be applied in parallel (see figure 1, for example the exponentiation 
modules x 2 mod p and x 2 mod q which calculate different subtasks at the same time. 
Thus one of ordinary skill in the art would recognize the speed and savings in 
computational resources which could be derived from using the teachings of 
Quisquater and would be strongly motivated to apply these teaching to Lidl algorithm. 
Lidl pages 51 5-51 7 also teaches the generalization of the above process for the case 
of k factors. 

Lidl is silent on the choice of the e; 's, as he is seeking to generalize the RSA system to 
its fullest. The RSA paper teaches both randomness and distinctness are important in 
the selection of primes for the two prime factors p and q scheme that they propose (see 
Rivest et. al. page 6, line 34 page 9, lines 2-3, and line 26-27) in order to maximize 
security. If the size of the modulus n is restricted to 200 digits, then maximum security 
is attained by taking by choose p and q differing by a few digits (distinctness) and 
choosen at random. Thus if randomness and distinctness is not applied to multifactor 
scheme, one losses the randomness that is there are a lot fewer ways to choose a two 
hundred digit number of the form p 2 q as opposed to pqr and hence a loss of security. 
Thus one of ordinary skill in the art would recognize in order to maximize security one 
must increase the number of possible choices which implies distinctness of all factors 
that is ei = e2 = e 3 = ... = e k in the teaching of Lidl. Thus one of ordinary skill of the art 
would have been modivated to combine the general teachings of Lidl with the additional 
speed enhancements of Quisquater and finally the security teachings of the original 
RSA paper to obtain a security system which is fast and could run on devices with 



Application/Control Number: 09/328,726 Page 6 

Art Unit: 2131 

limited computational resources such as CD ROM's, smartcards, secure net browers, 
etc. Claim 1 is rejected. 

Claim 18-66 and 73-92 rejected under 35 U.S.C. 103(a) as being unpatentable 
over Lidl and Pilz (Applied Abstract Algebra, 1984), and further in view of Quisquater 
and Couvreur, Fast Decipherment Algorithm for RSA Public -Key Cryptosystem, 1982) 
and Rivest et. al. A Method for Obtaining Digital Signatures and Public-key 
Cryptosystem, Communications of the ACM, 21(2) February 1978, as applied to claim 
17 above, and further in view of Ding et. al. The Chinese Remainder Theorem, World 
Scientific. 

9. As per claim 18-21 , the details of a recursive (iterative) algorithm is given page 
23. Note the relabling of the dummy indices and the use of the extended Euclidian 
algorithm UjMj + Vj rrij = 1 to provide the inverse Uj or w" 1 j modulo m k or pi in 2.8 of the 
product M k corresponding to applicant's Wj . Claims 18-21 are rejected. 

10. Claims 22-26 are a system implementation of claims 17-21 and are rejected in 
view of the same prior art of record. 

11. In claim 17, the limitation of the decomposition into subtasks performed 
simultaneously, of the RSA decryption equation was applied without any corresponding 
application of the same technique to the encryption part of the encryption system. The 
limitations of claims 27 are directed to the same decomposition into subtasks to be 
performed simultaneously. One of ordinary skill in the art recognizing the same benefits 
may be had by applying the same mathematics to the encryption area would have been 
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motivated to apply it to the encryption part of the cryptosystem to gain the same 
benefits. Claim 27 is rejected. 

12. As per claims 28-31 , expand upon the CRT algorithm applied to this aspect of the 
encryption and would be rejected on the same group as claims 18-21 . Claims 28-31 are 
rejected. 

13. Claims 32-36 are a system implementation of claims 27-31 and are rejected in view 
of the same prior art of record. Claims 27-31 are rejected. 

14. Claims 37-41 and 44 recite a method for decoding corresponding to the method of 
encoding claims of 17-22 and are rejected in view of the same prior are (all refereneces 
disclosed both an encoding and decoding scheme). Claim 37-41 and 44 are rejected. 

15. As per claims 42-43, and 45-46, the limitation of a cryptographic system for decoding 
implementing method of claims 37-41 , and 44 is rejected in view of the same prior art of 
record. Claims 42-41 and 44 are rejected. 

16. As per claim 47-51 , the limitation for a method of generating digital signature is 
disclosed by Rivest (see pages 4-6) for two prime factors. Using the Lidl/Quisquater/Ding 
scheme, one of ordinary skill in the art would have also been modivated to apply the same 
techniques to digital signature to increase speed, conserve computational resources which 
are important credit card transactions, and digital rights management. Claims 47-51 are 
rejected. 

17. Claims 52-56 are a system implementation for the generating method recited in 
claims 47-52 and is rejected in view of the same prior art of record. Claims 52-56 
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1 8. As per claims 57-61 , the limitations of a process for verifying digital signatures, 
recited in the method claims 47-52 is disclosed, by Rivest (page 5). Claims 57-61 are 
rejected. 

19. Claims 62-66, recite a system for generating and validating digital signatures 
corresponding to method claims 47-51 and 57-61 and are rejected in view of the same prior 
art of record. 

20. Claims 73, 75, 77, 79, 81, 83, 85, 87, 89, 91 recites the limitation of a plurality of 
exponentiator units operating substantially simultaneously and performing subtasks are 
disclosed by Figure 1 Quisquater. Claims 73, 75, 77, 79, 81, 83, 85, 87, 89, 91 are 
rejected. 

21. Claims 74, 76, 78, 80, 82, 84, 86, 88, 90, 92 recite the limitation that each distinct 
random prime factore has the same number of bits is disclosed in Quisquater page 906 
second column under figure 1 . 

22. Claims 17 is rejected under 35 U.S.C. 103(a) as being unpatentable over Rivest et. 
al. (US 4,405,829 A) henceforth RSA, and further in view of Rivest et. al. A Method for 
Obtaining Digital Signatures and Public-key Cryptosystem, Communications of the ACM, 
21(2) February 1978, henceforth Rivest, Quisquater, Fast Decipherment Algorithm for RSA 
Public-key Cryptosystem and further in view of Knuth, The Art of Computer Programming 
vol 2 page 179. 

23. As per claim 17, the limitation of a method for processing messages in a 
communication system with RSA public key encryption an alternative embodiment of the 
present invention ( see Figure 6, Abstract line 1 of Column 4, lines 15 through Column 5, 
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lines 1 1 , RSA), such that three or more primes pi ( p 2 , P3 Pk are generated, such that k > 
2 (Column 13, lines 30-31) then using the present invention (Column 13, line 29) provided 
and e relatively prime to 4>(n) (Column 13, lines 42-44), <J)(n) = (p<\ -1 )(p 2 -1 )(P3 -1 )... (Pk 
-1 ), that is, relatively prime to (pi -1) (p 2 -1)( p 3 -1) ... (p k -1) and generating from the 
product of these primes and integer n which will be the resulting modulus n (Column 13, line 
30-31, line 34) using the provided e and n together with a message M where 0 < M < n-1 
(Column 4, line 26), and the RSA encryption algorithm C = M e mod n (Column 4, line 59, 

RSA) to generate a cipher text C, decrypting C at the intended recipient (Column 6, 29-31) 
having available to it. RSA suggest the CRT but is silent on the details. Quisquater 
provides the details and modivations (see discussion in claim 17 above) for the 
implimentation for two parameters. 

24. The RSA paper teaches both randomness and distinctness are important in the 
selection of primes for the two prime factors p and q scheme that they propose (see 
Rivest et. al. page 6, line 34 ;page 9, lines 2-3, and line 26-27) in order to maximize 
security. If the size of the modulus n is restricted to 200 digits, then maximum security 
is attained by taking by choose p and q differing by a few digits (distinctness) and 
choosen at random. Thus if randomness and distinctness is not applied to multifactor 
scheme, one losses the randomness that is there are a lot fewer ways to choose a two 
hundred digit number of the form p 2 q as opposed to pqr and hence a loss of security. 
Thus one of ordinary skill in the art would recognize in order to maximize security one 
must increase the number of possible choices which implies distinctness of all factors 
that is ei = e 2 = e 3 = ... = e k . Thus one of ordinary skill of the art would have been 
modivated to combine the general teachings of Lidl with the additional speed 
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enhancements of Quisquater and finally the security teachings of the original RSA 
paper to obtain a security system which is fast and could run on devices with limited 
computational resources such as CD ROM's, smartcards, secure net browers, etc. 

25. RSA patent recites a different embodiment (Column 13, lines 30-31) in which the 
modulus n is a product of three or more primes (not necessarily distinct primes). RSA 
further goes on to state that decoding may be performed modulo each of the prime factors 
of n (thus breaking the calculations into a series of subtasks involving the factors of n and 
not n) and then combining the results using "Chinese remaindering" (that is the Chinese 
remainder theorem henceforth CRT). However, only in the case of distinct primes can the 
decoding problem be performed using the CRT. In the case of non-distinct primes one 
would need in addition Hensers Lemma (or a generalization by Hensel of p-adics, see 
Knuth vol 2, page 179). Thus it is clear that the RSA patent is referring to the case of 
distinct primes. Claim 1 is rejected. 

26. Claim 18-66 and 73-92 rejected under 35 U.S.C. 103(a) as being unpatentable 
over Rivest et. ai. (US 4,405,829 A) henceforth RSA, and further in view of Quisquater 
and Couvreur, Fast Decipherment Algorithm for RSA Public -Key Cryptosystem, 1982) 
and Rivest et. al. A Method for Obtaining Digital Signatures and Public-key 
Cryptosystem, Communications of the ACM, 21(2) February 1978, as applied to claim 
17 above, and further in view of Ding et. al. The Chinese Remainder Theorem, World 
Scientific. 

27. As per claim 18-21 , the details of a recursive (iterative) algorithm is given page 
23. Note the relabling of the dummy indices and the use of the extended Euclidian 
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algorithm UjMj + Vj nrij - 1 to provide the inverse Uj or w" 1 j modulo mk or pi in 2.8 of the 
product M k corresponding to applicant's Wj . Claims 18-21 are rejected. 

28. Claims 22-26 are a system implementation of claims 17-21 and are rejected in 
view of the same prior art of record. 

29. In claim 17, the limitation of the decomposition into subtasks performed 
simultaneously, of the RSA decryption equation was applied without any corresponding 
application of the same technique to the encryption part of the encryption system. The 
limitations of claims 27 are directed to the same decomposition into subtasks to be 
performed simultaneously. One of ordinary skill in the art recognizing the same benefits 
may be had by applying the same mathematics to the encryption area would have been 
motivated to apply it to the encryption part of the cryptosystem to gain the same 
benefits. Claim 27 is rejected. 

30. As per claims 28-31 , expand upon the CRT algorithm applied to this aspect of the 
encryption and would be rejected on the same group as claims 18-21 . Claims 28-31 are 
rejected. 

* 

31 . Claims 32-36 are a system implementation of claims 27-31 and are rejected in view 
of the same prior art of record. Claims 27-31 are rejected. 

32. Claims 37-41 and 44 recite a method for decoding corresponding to the method of 
encoding claims of 17-22 and are rejected in view of the same prior are (all refereneces 
disclosed both an encoding and decoding scheme). Claim 37-41 and 44 are rejected. 
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33. As per claims 42-43, and 45-46, the limitation of a cryptographic system for decoding 
implementing method of claims 37-41, and 44 is rejected in view of the same prior art of 
record. Claims 42-41 and 44 are rejected. 

34. As per claim 47-51 , the limitation for a method of generating digital signature is 
disclosed by Rivest (see pages 4-6) for two prime factors. Using the Lidl/Quisquater/Ding 
scheme, one of ordinary skill in the art would have also been modivated to apply the same 
techniques to digital signature to increase speed, conserve computational resources which 
are important credit card transactions, and digital rights management. Claims 47-51 are 
rejected. 

35. Claims 52-56 are a system implementation for the generating method recited in 
claims 47-52 and is rejected in view of the same prior art of record. Claims 52-56 

36. As per claims 57-61 , the limitations of a process for verifying digital signatures, 
recited in the method claims 47-52 is disclosed by Rivest (page 5). Claims 57-61 are 
rejected. 

37. Claims 62-66, recite a system for generating and validating digital signatures 
corresponding to method claims 47-51 and 57-61 and are rejected in view of the same prior 
art of record. 

38. Claims 73, 75, 77, 79, 81 , 83, 85, 87, 89, 91 recites the limitation of a plurality of 
exponentiator units operating substantially simultaneously and performing subtasks are 
disclosed by Figure 1 Quisquater. Claims 73, 75, 77, 79, 81, 83, 85, 87, 89, 91 are 
rejected. 
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39. Claims 74, 76, 78, 80, 82, 84, 86, 88, 90, 92 recite the limitation that each distinct 
random prime factore has the same number of bits is disclosed in Quisquater page 906 
second column under figure 1 . 

40. Claim 17 is rejected under 35 U.S.C. 103(a) in view of Nemo, RSA Moduli 
Should Have 3 Primes Factors, August 1996 and Rivest et. al. A Method for Obtaining 
Digital Signatures and Public-key Cryptosystem, Communications of the ACM, 21(2) 
February 1978, henceforth Rivest and Quisquater Fast Decipherment Algorithm for RSA 
Public-key Cryptosystem, 1982. 

41 . Nemo discloses the use of a three prime RSA (see section 3). Each prime p, q, r 
would contain the same number of bits (256 bits) and the modulus n would contain 768 
bits. The system would provide digital signature, encryption, decryption, and self 
encryption (files, backup tapes and archives) and in section 4.2 provide secure signed 
routers for networks. Nemo's three prime RSA is faster because of the CRT(section 
3.1). Although, Nemo's three prime RSA applies CRT to decryption section, still greater 
speed could be achieved by applying to both encryption/decryption. Such details are 
supplied by Quisquater. 

42. The RSA paper teaches both randomness and distinctness are important in the 
selection of primes for the two prime factors p and q scheme that they propose (see 
Rivest et. al. page 6, line 34 ;page 9, lines 2-3, and line 26-27) in order to maximize 
security. If the size of the modulus n is restricted to 200 digits, then maximum security 
is attained by taking by choose p and q differing by a few digits (distinctness) and 
choosen at random. Thus if randomness and distinctness is not applied to multifactor 
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scheme, one losses the randomness that is there are a lot fewer ways to choose a two 
hundred digit number of the form p 2 q as opposed to pqr and hence a loss of security. 
Thus one of ordinary skill in the art would recognize in order to maximize security one 
must increase the number of possible choices which implies distinctness of all factors 
that is ei = e2 = e3 = ... = e k . Thus one of ordinary skill of the art would have been 
modivated to combine the general teachings of Lidl with the additional speed 
enhancements of Quisquater and finally the security teachings of the original RSA 
paper to obtain a security system which is fast and could run on devices with limited 
computational resources such as CD ROM's, smartcards, secure net browers, etc. 
Claim 1 is rejected. 

43. * Claim 18-66 and 73-92 rejected under 35 U.S.C. 103(a) as being unpatentable 
over Nemo, RSA Moduli Should Have 3 Primes Factors, August 1996, and further in 
view of Quisquater and Couvreur, Fast Decipherment Algorithm for RSA Public -Key 
Cryptosystem, 1982) and Rivest et. al. A Method for Obtaining Digital Signatures and 
Public-key Cryptosystem, Communications of the ACM, 21(2) February 1978, as 
applied to claim 17 above, and further in view of Ding et. al. The Chinese Remainder 
Theorem, World Scientific. 

44. As per claim 18-21 , the details of a recursive (iterative) algorithm is given page 
23. Note the relabling of the dummy indices and the use of the extended Euclidian 
algorithm UjMj + Vj rr\\ = 1 to provide the inverse Uj or w" 1 j modulo m k or p\ in 2.8 of the 
product M k corresponding to applicant's Wj . Claims 18-21 are rejected. 
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45. Claims 22-26 are a system implementation of claims 17-21 and are rejected in 
view of the same prior art of record. 

46. In claim 17, the limitation of the decomposition into subtasks performed 
simultaneously, of the RSA decryption equation was applied without any corresponding 
application of the same technique to the encryption part of the encryption system. The 
limitations of claims 27 are directed to the same decomposition into subtasks to be 
performed simultaneously. One of ordinary skill in the art recognizing the same benefits 
may be had by applying the same mathematics to the encryption area would have been 
motivated to apply it to the encryption part of the cryptosystem to gain the same 
benefits. Claim 27 is rejected. 

47. As per claims 28-31 , expand upon the CRT algorithm applied to this aspect of the 
encryption and would be rejected on the same group as claims 18-21. Claims 28-31 are 
rejected. 

48. Claims 32-36 are a system implementation of claims 27-31 and are rejected in view 
of the same prior art of record. Claims 27-31 are rejected. 

49. Claims 37-41 and 44 recite a method for decoding corresponding to the method of 
encoding claims of 17-22 and are rejected in view of the same prior are (all refereneces 
disclosed both an encoding and decoding scheme). Claim 37-41 and 44 are rejected. 

50. As per claims 42-43, and 45-46, the limitation of a cryptographic system for decoding 
implementing method of claims 37-41 , and 44 is rejected in view of the same prior art of 
record. Claims 42-41 and 44 are rejected. 

51 . As per claim 47-51 , the limitation for a method of generating digital signature is 
disclosed by Rivest (see pages 4-6) for two prime factors. Using the Lidl/Quisquater/Ding 




* Application/Control Number: 09/328,726 Page 16 

Art Unit: 2131 

scheme, one of ordinary skill in the art would have also been modivated to apply the same 
techniques to digital signature to increase speed, conserve computational resources which 
are important credit card transactions, and digital rights management. Claims 47-51 are 
rejected. 

52. Claims 52-56 are a system implementation for the generating method recited in 
claims 47-52 and is rejected in view of the same prior art of record. Claims 52-56 

53. As per claims 57-61 , the limitations of a process for verifying digital signatures, 
recited in the method claims 47-52 is disclosed by Rivest (page 5). Claims 57-61 are 
rejected. 

54. Claims 62-66, recite a system for generating and validating digital signatures 
corresponding to method claims 47-51 and 57-61 and are rejected in view of the same prior 
art of record. 

55. Claims 73, 75, 77, 79, 81, 83, 85, 87, 89, 91 recites the limitation of a plurality of 
exponentiator units operating substantially simultaneously and performing subtasks are 
disclosed by Figure 1 Quisquater. Claims 73, 75, 77, 79, 81, 83, 85, 87, 89, 91 are 
rejected. 

56. Claims 74, 76, 78, 80, 82, 84, 86, 88, 90, 92 recite the limitation that each distinct 
random prime factore has the same number of bits is disclosed in Quisquater page 906 
second column under figure 1. 

Response to Arguments 

57. Applicant's arguments with respect to claim 17-66 and 73-92 have been 
considered but are moot in view of the new ground(s) of rejection. 

Conclusion 
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